Leaked files show continued activity despite links to terror networks, failed ID checks and other red flags